Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
File: 83UsEPGw0HtfSOV539FONycT-0c.mft (raw, json)
Hash identifier: AnCR1nsDivG0sckdvAesGlNIkaRuiIqV1KMStPwaGlU=
Subject key identifier: F9:29:47:48:12:72:AB:EE:8B:6C:23:2C:E0:71:82:C0:C6:71:AC:63
Authority key identifier: F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
Certificate issuer: /CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Certificate serial: 01A0D01248892470E1649BA2D24EEDE6E2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
Manifest number: 0DA7
Signing time: Wed 23 Sep 2026 21:00:54 +0000
Manifest this update: Wed 23 Sep 2026 21:00:54 +0000
Manifest next update: Thu 24 Sep 2026 21:00:54 +0000
Files and hashes: 1: 83UsEPGw0HtfSOV539FONycT-0c.crl (hash: gja5wAMssU/1pdk8q2Lz+DSRYlhHJOw/yknuM+5MrMk=)
2: SEVRhCs9csFySiANJYyFSILGX2U.roa (hash: /VnUVc/+1Tu0LCR67oUx4RL+inrOahGNcaF68LU9sGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:48:89:24:70:e1:64:9b:a2:d2:4e:ed:e6:e2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Validity
Not Before: Sep 23 21:00:54 2026 GMT
Not After : Sep 24 21:00:54 2026 GMT
Subject: CN=f92947481272abee8b6c232ce07182c0c671ac63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:58:f0:a5:dc:72:44:03:c6:57:fe:3d:a8:
48:8d:9e:f6:a5:57:40:0e:d6:83:04:f9:75:bf:67:
cd:bc:cc:c2:24:85:df:db:54:53:7f:7f:c5:c4:7c:
fc:34:b9:bb:aa:79:fb:da:7e:1f:02:0e:f5:ff:ae:
05:d9:e4:09:fe:e6:3c:c7:0a:d0:03:52:48:13:34:
9c:66:3d:08:f3:49:29:d0:00:29:8e:44:8d:0e:0e:
b8:a4:77:d6:ef:bd:e6:52:fe:6b:72:94:af:46:6d:
13:28:83:36:b4:a7:78:fe:d1:52:34:97:c8:32:00:
86:a8:76:27:b5:ca:c4:13:1b:ad:53:9b:f0:6f:34:
68:a7:5a:2e:06:ad:44:c2:d3:6b:c5:b0:bf:70:b3:
60:52:8d:bc:ab:bb:be:30:60:96:f8:af:b1:29:77:
79:e9:77:90:78:96:0f:09:11:2e:19:63:d7:99:89:
ec:9f:5e:2b:01:7c:1e:ff:9c:c8:8a:2d:c8:58:af:
13:d5:1c:8a:ec:ac:2c:a8:3b:7a:1e:bd:68:9c:4b:
41:1b:30:51:79:e6:5f:b7:0e:cb:5f:51:5e:54:ff:
d6:b5:8f:61:5e:4c:bb:51:e6:02:96:23:39:aa:73:
4a:f3:84:54:e4:6e:92:1b:d7:10:8e:a5:9f:b3:1f:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:29:47:48:12:72:AB:EE:8B:6C:23:2C:E0:71:82:C0:C6:71:AC:63
X509v3 Authority Key Identifier:
keyid:F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c2:c1:8e:4a:74:89:a6:5b:5f:ed:94:6a:c0:07:ae:64:09:
f5:63:0b:6c:f7:b1:26:58:1d:53:9b:1c:3f:90:83:8c:7f:d8:
47:90:f2:5f:bd:81:cf:08:36:87:83:5b:f0:92:76:cb:9f:ae:
1b:a6:b5:2c:d1:17:e3:00:87:94:37:9e:aa:b7:59:ee:0d:84:
2e:77:bb:16:ee:91:10:35:d9:04:f9:24:17:20:82:0f:9e:22:
1c:cf:15:fc:75:c3:bf:b4:97:44:dd:8c:cc:bb:08:32:b8:c3:
01:7b:ce:7e:3e:2c:c2:0b:99:bd:05:f6:43:91:5a:70:e0:d0:
8d:02:9c:b4:23:18:74:0e:63:9f:cd:db:de:f9:d1:28:d8:5f:
a2:13:22:46:ac:06:f0:63:aa:e0:ea:da:cb:03:39:a4:15:f7:
aa:e9:42:8a:54:52:43:09:af:c9:87:42:1b:b5:ff:0e:64:77:
ab:55:fb:05:95:79:cc:c1:1f:50:2c:f7:c5:6c:86:2a:d4:02:
5d:3f:3a:c7:ff:22:c6:cf:46:62:05:3c:6c:8e:96:4b:09:2f:
e4:4b:22:1f:af:00:c8:f9:bb:55:a6:9f:f1:6b:2c:37:5d:75:
5b:96:d0:5a:e3:cc:6f:b6:d7:9e:1a:ba:ab:60:2b:4b:32:80:
50:c0:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:48:27 2026 by rpki-client